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Top Stories 

• A Kentucky accountant pleaded guilty October 23 to charges that he embezzled $8.7 
million from G&J Pepsi-Cola Bottlers Inc., by creating a sham account where he deposited 
checks before moving them to personal accounts. - Associated Press (See item 8) 

• Heavy rain storms October 24 caused flooding that forced the closure of Interstate 45 in 
Corsicana, northbound lanes of Interstate 35 in north Texas to be shut down, and caused a 
Union Pacific train to be partially submerged under water. - Weather.com (See item 11 ) 

• Thirty-two cars of a train derailed and spilled liquid asphalt on the BNSF Railway west of 
Gallup, New Mexico, October 23, prompting the closure of Route 118 while HAZMAT 
crews responded to the scene. - KNXV 15 Phoenix (See item 14 ) 

• Four people were killed and dozens of others were injured when a woman drove into a 
crowd of spectators at an Oklahoma State University homecoming parade near the Boone 
Pickens Stadium October 24. - CNN (See item 25 ) 
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Energy Sector 



1. October 23, WLOX 13 Biloxi - (Mississippi) Chevron spill: 10,000 gallon overflow 
being cleaned up. The Mississippi Department of Environmental Quality announced 
October 23 that 10,000 gallons of an oil product spilled from a Chevron Refinery in 
Pascagoula October 22. The cause of the spill is under investigation and inspectors 
determined that the spilled product was contained in a ditch on site. 

Source: http://www.wdam.com/storv/30336733/chevron-spill-10000-gallon-overflow- 
being-cleaned-up 

For another story, see item 6 

Chemical Industry Sector 

2. October 26, U.S. Environmental Protection Agency - (California; Connecticut) EPA 
resolves violations with Newport Beach, Calif, company for failure to report 
imported agriculture chemicals. Newport Beach, California-based American 
Vanguard Corporation agreed to pay $81,855 in a settlement with the U.S. 
Environmental Protection Agency October 23 for charges including failure to report the 
import of three toxic chemical substances in its pesticides and agriculture products 
imported by its subsidiaries, AMVAC Chemical Corporation and GemChem, Inc. 
Source: 

http://vosemite.epa.gOv/opa/admpress.nsf/0/5394CA7BB9D8BD9085257EE7005D295 
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3. October 25, WEAR 3 Pensacola - (Alabama) Fire rips through chemical plant. 
Firefighters spent several hours dousing flames in a fire at the Sunbelt Chemicals plant 
in Atmore October 24. No injuries were reported and officials traced the source of the 
flames to insulation containing sulfur dust that caught fire. 

Source: http://www.weartv.com/news/features/top-stories/stories/fire-rips-through- 
chemical-plant-6 1 622. shtml 

Nuclear Reactors, Materials, and Waste Sector 

4. October 23, South Jersey Times - (New Jersey) PSEG Nuclear’s Salem 2 reactor 
shut down for refueling, maintenance. PSEG Nuclear-owned Salem 2 nuclear reactor 
in Lower Alloways Creek Township was shut down for scheduled refueling and 
maintenance October 22. Supplemental contractors will also conduct nearly 18,000 
additional activities including replacing the reactor core with new materials. 

Source: 

http://www.ni.com/salem/index.ssf/2015/10/pseg nuclears salem 2 reactor shut dow 
n for refuel.html 



Critical Manufacturing Sector 

5. October 23, The Register - (International) Hackers pop grease monkeys’ laptops to 
disable Audi airbags. Security researchers from CrySyS Lab and Budapest University 
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of Technology and Economics discovered that third party software used in certain 
Volkswagen Group vehicles could be compromised using a zero-day vulnerability, 
allowing an attacker to disable airbags and other car functions without mechanics’ 
knowledge by falsifying car readouts via a malicious replaced dynamic link library 
(DLL) file used to communicate with the vehicle’s diagnostic cable. 

Source: 

http://www.theregister.co.ukA2015/10/23/hackers pop mechanics laptops to silently 
disable car airbags/ 

6. October 23, Securityweek - (International) Serious flaws found in Janitza power 
analyzers. Security researchers from Applied Risk discovered several vulnerabilities in 
Janitza power analyzer products, including an undocumented default password 
protecting a Lile Transfer Protocol (LTP) interface that could allow an attacker to 
upload and download arbitrary files, and a flaw in which an attacker could use a debug 
interface on Transmission Control Protocol (TCP) port 1239 to read and write files and 
execute JASIC code, among other issues. The vendor released firmware updates and 
new documentation addressing the issues; however researchers determined that not all 
flaws were effectively fixed. 

Source: http://www.securitvweek.com/serious-flaws-found-ianitza-power-analvzers 

Defense Industrial Base Sector 

Nothing to report 

Financial Services Sector 

7. October 24, WRGB 6 Schenectady - (New York; New Jersey; Massachusetts) Man 
accused of ‘skimming’ ATMs. Authorities arrested a suspect in New Lebanon 
October 24 who was allegedly part of a widespread ATM skimming operation that stole 
hundreds of thousands from banks in New York, New Jersey, Massachusetts, and 
potentially elsewhere. Police arrested the man after he reportedly used a skimming 
device at Berkshire Bank and Lirst Niagara Bank ATMs in Chatham. 

Source: http://www.cbs6albany.com/news/features/top-story/stories/man-accused- 
skimming-atms-29920.shtml 

8. October 23, Associated Press - (Kentucky; Virginia) Appalachian Trail hiker pleads 
guilty to wire fraud in embezzling case. A Kentucky accountant pleaded guilty 
October 23 to charges that he embezzled $8.7 million from G&J Pepsi-Cola Bottlers 
Inc., by creating a sham account where he deposited checks before moving them to 
personal accounts. The man was found in Damascus, Virginia, after hiking along the 
Appalachian Trail as a fugitive for about six years. 

Source: 

http://www.tuscaloosanews.com/article/201 5 1023/NEWS/151029853/1002?Title=App 
alachian-trail-hiker-pleads-guilty-to-wire-fraud-in-embezzling-case- 

Lor another story, see item 30 
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Transportation Systems Sector 



9. October 26, Cincinnati Enquirer - (Ohio) 20-year-old killed in Boone Co. crash. A 
portion of Interstate 275 in Boone County was shut down for approximately 5 hours 
October 25 while officials investigated a 3-vehicle crash after a vehicle lost control and 
struck a guard rail, causing a chain reaction accident which killed 1 person. 

Source: http://www.cincinnati.com/story/news/traffic/2015/10/25/-275-west-closed- 
boone-co/74604886/ 

10. October 25, KETV 7 Omaha - (Nebraska) Gage County crash kills four people. A 
mile of Highway 77 in Beatrice was shut down for more than 5 hours October 24 while 
officials investigated a 2-vehicle accident that killed 4 women and injured 1 man after 
one of the vehicles swerved into the northbound lane while trying to avoid a deer and 
was hit by an oncoming vehicle. 

Source: http://www.ketv.com/news/gage-countv-crash-kills-four-people/36039176 

11. October 25, Weather.com - (Texas) Houston residents told to avoid traveling; Texas 
roads, Interstates closed. The city of Houston activated its Emergency Operations 
Center October 24 after heavy rain storms caused flooding that forced the closure of 
Interstate 45 in Corsicana in both directions, northbound Interstate 35 in north Texas to 
be shut down at mile marker 353, and caused a Union Pacific train to be partially 
submerged under water, prompting the rescue of two employees. 

Source: http://www.weather.com/news/news/texas-new-mexico-plains-flood-threat 

12. October 25, KCRA 3 Sacramento - (California) CHP: 5 killed, 2 hurt in head-on 
crash in Tuolumne County. Both directions of Highway 120 in Tuolumne County 
was shut down for 5 hours October 24 while officials investigated a head-on collision 
that killed 5 people and injured 2 others. 

Source: http://www.kcra.com/news/local-news/news-modesto/chp-5-killed-2-hurt-in- 
headon-crash-n-tuolumne-county/360353 1 8 

13. October 24, WTVR 6 Richmond - (Virginia) 2 dead in fiery wreck that closed 1-85 in 
Dinwiddie. Interstate 85 in Dinwiddie County near mile marker 46 was shut down for 
approximately 4 hours October 24 while officials investigated a crash after a vehicle 
ran off the roadway and struck a tree, killing 2 people and a dog. 

Source: http ://wtvr. com/20 15/1 0/24/i- 85 -dinwiddie-fiery-pickup- wreck/ 

14. October 23, KNXV 15 Phoenix - (New Mexico) 32 train cars derail, spill closes down 
State Route 118 in New Mexico. Thirty-two cars of a train derailed and spilled liquid 
asphalt on the BNSF Railway west of Gallup, New Mexico, October 23, prompting the 
closure of Route 118 while HAZMAT crews responded to the scene. Officials 
determined that the spill was non-toxic and there were no reports of injuries. 

Source: http://www.abcl5.com/news/national/32-train-cars-derail-spill-closes-down- 
state-route- 1 1 8-in-new-mexico 
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Food and Agriculture Sector 



15. October 25, Middletown Times Herald-Record - (New York) Three-alarm fire guts 
tortilla factory in Newburgh. A 3-alarm fire at Azteca Food in the city of Newburgh 
severely damaged the bakery and tortilla factory’s warehouse and manufacturing 
facility October 25, prompting an evacuation of nearby areas. Firefighters remained on 
site for more than 2 hours containing the incident and an investigation is ongoing to 
determine the cause. 

Source: http://www.recordonline.com/article/20151025/NEWS/151029485 

16. October24, U.S. Food and Drug Administration - (International) UPC correction: 
David Trail Mix Sweet & Salty voluntarily recalled due to undeclared dairy 
allergen. Nebraska-based ConAgra Foods issued a voluntary recall October 24 for its 
DAVID Trail Mix Sweet & Salty flavor manufactured by a third party supplier due to 
misbranding after the products were found to contain undeclared milk protein. The 
items were shipped to retails stores nationwide and Mexico. 

Source: http://www.fda.gov/Safety/Recalls/ucm469050.htm 

17. October 24, U.S. Food and Drug Administration - (National) Ethereal Confections 
issues allergy alert on undeclared amounts of milk in chocolates. Woodstock, 
Illinois-based Ethereal Confections issued a voluntary recall for its Inclusion Bars & 
Mendiants and its Meltaway Bars & Meltaways October 21 after testing revealed that 
the products contained undeclared milk. The products were sold at the company’s 
Woodstock location and through Internet sales. 

Source: http://www.fda.gov/Safety/Recalls/ucm468950.htm 

18. October 23, U.S. Food and Drug Administration - (National) Whole Foods Market 
recalls Curry Chicken Salad and Classic Deli Pasta Salad in seven states due to 
possible Listeria contamination. Whole Foods Market issued a recall October 23 for 
its bulk and packaged Curry Chicken Salad and Class Deli Pasta Salad products after 
routine inspection of Whole Foods Market’s North Atlantic Kitchen facility revealed 
positive traces of Listeria Monocytogenes. The products were shipped to stores in 
several States. 

Source: http://www.fda.gov/Safety/Recalls/ucm469008.htm 

19. October 23, U.S. Food and Drug Administration - (National) Salix Animal Health, 
LLC, expands voluntary recall of Good N Fun Beefhide Chicken Sticks dog treats 
due to possible Salmonella contamination. Deerfield, Florida-based Salix Animal 
Health, LLC expanded its recall of “Good ‘n’ Fun - Beefhide Chicken Sticks” products 
packaged in 2.8 ounce bags October 23 after sampling tests revealed the presence of 
Salmonella. The product was shipped nationwide to Dollar General, Dollar Tree, and 
Family Dollar retail stores. 

Source: http://www.fda.gov/Safety/Recalls/ucm468970.htm 

20. October 23, U.S. Food and Drug Administration - (National) Seaquest Seafood Corp. 
recalling Dehydrated & Marinated Uneviscerated Fish because of possible health 
risk. Industry, California-based Seaquest Seafood Corp., recalled its Dehydrated & 
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Marinated Uneviscerated Fish due to potential Clostridium botulinum contamination. 
The products were distributed nationwide through restaurant distributors and retail 
stores. 

Source: http://www.fda.gov/Safety/Recalls/ucm468878.htm 

Water and Wastewater Systems Sector 

21. October 24, KXAN 36 Austin - (Texas) 50,000 gallons of wastewater overflow due to 
heavy rains. Austin Water reported October 24 that over 50,000 gallons of wastewater 
overflowed from a lift station near Lake Creek due to recent heavy rains. The spill did 
not impact customer water and individuals using private drinking water supply wells 
near the overflow site were advised to boil water. 

Source: http://kxan.com/2015/10/24/5000Q-gallons-of-wastewater-overflow-due-to- 
heavy-rains/ 

22. October 24, Go Skagit - (Washington) Toxic bacteria closes Pass Lake. Officials 
reported October 23 that Pass Lake in Deception Pass State Park in Skagit County was 
closed to recreational use due to high levels of toxic cyanobacteria, also known as blue- 
green algae. Officials are investigating the cause. 

Source: http://www.goskagit.com/news/toxic-bacteria-closes-pass- 
lake/article 0b8688df-6e4b-5d31-8d06-8a55f0cal48a.html 



Healthcare and Public Health Sector 

See item 30 

Government Facilities Sector 

23. October 26, WNCN 17 Goldsboro - (North Carolina) Lockdown lifted at NCCU after 
student shot, shooter still at large. Durham Police are searching for a gunman who 
shot and injured a student on the campus of North Carolina Central University October 
25, prompting the school to go on lock down for approximately 40 minutes until 
authorities issued an all clear. 

Source: http://wncn.com/2015/10/25/active-shooter-and-gunfire-at-nccu-college- 
police-say/ 

24. October 25, KXAS 5 Fort Worth - (Texas) Flooding forces school closures in 
Navarro County. Independent school districts in Navarro County, including Kerens, 
Mildred, Dawson, Frost, Blooming Grove, and Rice were closed October 26 due to 
poor road conditions prompted by flooding in the area. A levee breach underneath the 
FM 1126 bridge west of Interstate 45 also forced the closure of Farm to Market Road 
October 25. 

Source: http://www.nbcdfw.com/news/local/Water-Breaches-Levee-in-Navarro- 
Countv-Flash-Flood-Warning-336920521.html 

25. October 25, CNN - (Oklahoma) Driver faces murder charges in Oklahoma State 
crash. Four people were killed and dozens of others were injured when a woman 
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accused of driving under the influence, drove into a crowd of spectators at an 
Oklahoma State University homecoming parade near the Boone Pickens Stadium 
October 24. 

Source: http://www.cnn.com/2015/10/25/us/oklahoma-car-into-crowd/ 

26. October 24, Decatur Daily - (Alabama) DCS cancels classes after power line severed 
at Decatur High. Classes at Decatur High and Decatur High Developmental schools 
were cancelled October 23 due to a power outage prompted by a construction worker 
who inadvertently severed an underground power line October 22. 

Source: http://www.decaturdailv.com/news/local/dcs-cancels-classes-after-power-line- 
severed-at-decatur-high/article 5fd3d9cb-a8f5-5f8a-9d3f-f06d275e6e77.html 

27. October 25, WAFF 48 Huntsville - (Alabama) Sipsey wildfire 30% contained, says 
Forest Service. Crews reached 30 percent containment October 25 of the 1,900-acre 
fire burning in Bankhead National Forest in Alabama. 

Source: http://www.waff.com/storv/30341633/sipsev-wildfire-30-contained-says- 
fore st- service 

Emergency Services Sector 

28. October 23, Associated Press - (Iowa) 9 workers out at Iowa prison amid widening 
security inquiry. A spokesperson reported October 23 that nine employees at 
Anamosa State Penitentiary in Iowa City resigned or were fired in October as part of an 
ongoing investigation into the smuggling of cellphones and drugs into the prison. A co- 
conspirator was also charged for allegedly supplying marijuana and prescription pills to 
guards to use or trade among themselves. 

Source: http://www.nonpareilonline.com/news/state/wire/workers-out-at-iowa-prison- 
amid-widening-security-scandal/article 40fc7294-366e-5772-a9fe-74c4aa4b8d88.html 

29. October 23, WCPO 9 Cincinnati - (Ohio) Rifle, Taser stolen from Cincinnati Police 
officer’s car. Authorities are searching for a thief who stole a rifle and Taser from a 
Cincinnati Police officer’s vehicle while it was parked in a Green Township 
neighborhood the week of October 19. 

Source: http://www.wcpo.com/news/local-news/hamilton-countv/green-township/rifle- 
taser-stolen-from-cincinnati-police-officers-car 

Information Technology Sector 

30. October 26, Softpedia - (International) 12 new malware strands are discovered 
every minute. Security researchers at G DATA released report findings revealing that 
the company discovered 3,045,722 new types of malware in the first half of 2015, a 
26.6 percent increase since the second half of 2014, and that most attacks were either 
adware or potentially unwanted programs (PUPs) hosted on U.S. Web sites from the 
healthcare and technology and telecommunications, among others. G DATA also 
observed an increase in banking trojan usage for the first time since 2012. 

Source: http://news.softpedia.com/news/12-new-malware-strands-are-discovered- 
every-minute-495 302 . shtml 
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31. October 23, Softpedia - (International) Malware spread via black hat SEO 
campaign. Security researchers from Heimdal Security discovered a malware 
campaign in which criminals are using black hat search engine optimization (SEO) to 
distribute malicious software to technical users typing terms such as “Java JRE,” “MSN 
7,” or “Windows 8,” into searches, which would then return infected Google top search 
results. 

Source: http://news.softpedia.com/news/malware-spread-via-black-hat-seo-campaign- 
495195-shtml 



For additional stories, see items 5 and 6 

Internet Alert Dashboard 

To report cyber infrastructure incidents or to request information, please contact US-CERT at soc@us-cert.gov or 
visit their Web site: http://www.us-cert.gov 

Information on IT information sharing and analysis can be found at the IT ISAC (Information Sharing and 
Analysis Center) Web site: http://www.it-isac.org 



Communications Sector 

See item 30 

Commercial Facilities Sector 

32. October 26, Chattanoogan.com - (Tennessee) Loss estimated at $1 million in fire 
that forces evacuation of Hixson Kmart. A Kmart located in Hixson sustained 
extensive damage October 25 after a fire began inside the facility, prompting an 
evacuation of the building and causing an estimated $1 million in damages. The cause 
of the fire was ruled accidental and no injuries were reported. 

Source: http://www.chattanoogan.com/2015/10/26/311186/Loss-Estimated-At-l- 
Million-In-Fire.aspx 

Dams Sector 



See item 24 
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Department of Homeland Security (DHS) 

DHS Daily Open Source Infrastructure Report Contact Information 

About the reports - The DHS Daily Open Source Infrastructure Report is a daily [Monday 
through Friday] summary of open-source published information concerning significant critical 
infrastructure issues. The DHS Daily Open Source Infrastructure Report is archived for 10 days on 
the Department of Homeland Security Web site: http://www.dhs.gov/lPDailyReport 

Contact Information 

Content and Suggestions: Send mail to cikr.productfeedback@hq.dhs.gov or contact the DHS 

Daily Report Team at (703) 942-8590 

Subscribe to the Distribution List: Visit the DHS Daily Open Source Infrastructure Report and follow 

instructions to Get e-mail updates when this information changes . 

Removal from Distribution List: Send mail to support @ govdelivery.com . 



Contact DHS 

To report physical infrastructure incidents or to request information, please contact the National Infrastructure 
Coordinating Center at nicc@hq.dhs.gov or (202) 282-9201. 

To report cyber infrastructure incidents or to request information, please contact US-CERT at soc@us-cert.gov or visit 
their Web page at www.us-cert. gov . 

Department of Homeland Security Disclaimer 

The DHS Daily Open Source Infrastructure Report is a non-commercial publication intended to educate and inform 
personnel engaged in infrastructure protection. Further reproduction or redistribution is subject to original copyright 
restrictions. DHS provides no warranty of ownership of the copyright, or accuracy with respect to the original source 
material. 
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